Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42bbbb114f3da97a5bc603c3e2c51e0326ed95d7.cer
File:                     42bbbb114f3da97a5bc603c3e2c51e0326ed95d7.cer (raw, json)
Hash identifier:          B+f8Z/gW29pXny79WD0Kbe5e5I6bGAiro3OvXPTMQzs=
Subject key identifier:   33:6A:12:F5:96:F2:F6:40:A8:97:BC:1B:9B:83:6A:78:7A:44:5A:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F45A2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/08b84154-e029-4789-8a45-76898a1f16b1/42bbbb114f3da97a5bc603c3e2c51e0326ed95d7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/08b84154-e029-4789-8a45-76898a1f16b1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 22:53:10 +0000
Certificate not after:    Thu 30 Jan 2025 18:28:16 +0000
Subordinate resources:    AS: 272104
                          IP: 2803:9710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16013869 (0xf45a2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  8 22:53:10 2023 GMT
            Not After : Jan 30 18:28:16 2025 GMT
        Subject: CN=42bbbb114f3da97a5bc603c3e2c51e0326ed95d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:bb:e3:7e:42:ac:21:27:2e:fd:1d:11:9d:
                    df:f9:2a:35:d3:dd:c5:83:3a:01:ab:24:4d:2b:d7:
                    d5:7e:42:cb:34:4e:5e:20:a2:f2:72:e7:9d:6c:0b:
                    4b:84:11:e2:7a:b6:2d:5a:d5:0b:10:dc:95:22:b8:
                    44:5f:c3:3a:e0:7c:bf:d6:07:26:bc:b2:b0:87:70:
                    fe:05:4f:98:42:41:2a:fb:40:50:bf:2b:13:c4:3e:
                    0d:31:87:39:52:f5:f1:e1:86:ec:74:d2:cc:8d:f5:
                    b5:8f:f4:98:9f:98:f5:b0:58:cd:c7:4b:50:4c:c6:
                    13:b4:45:8b:34:77:91:ba:34:79:58:c6:23:b1:d5:
                    75:56:8f:f0:98:d3:89:0a:a9:8e:09:dd:26:73:8c:
                    11:e0:a0:0d:50:80:2c:c1:be:db:a8:86:4e:98:d4:
                    b5:73:5d:07:9b:6c:56:01:ed:18:be:a7:44:81:11:
                    ef:bd:a2:37:63:50:e6:47:70:81:6f:6c:70:4e:92:
                    eb:8e:9b:8b:ac:d5:cd:34:52:50:7b:db:4e:60:09:
                    66:3a:c2:13:92:22:18:fa:9c:c2:88:2e:28:66:5c:
                    d9:6e:10:4e:dc:a3:b2:c3:c1:69:33:da:3d:2e:86:
                    b0:76:8b:f8:3d:f0:88:c3:f7:27:46:5a:fb:05:93:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6A:12:F5:96:F2:F6:40:A8:97:BC:1B:9B:83:6A:78:7A:44:5A:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/08b84154-e029-4789-8a45-76898a1f16b1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/08b84154-e029-4789-8a45-76898a1f16b1/42bbbb114f3da97a5bc603c3e2c51e0326ed95d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272104

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:91:f6:32:91:14:1c:9d:14:ed:a9:57:3d:07:90:90:fd:
         27:11:bb:d2:ed:37:64:c0:a3:5f:b2:41:4e:31:f4:84:5a:bf:
         d0:e1:ea:2b:ec:b8:f5:d4:a9:6a:89:33:f5:62:f3:21:7d:05:
         3a:b8:a7:39:ae:7c:fd:4d:eb:4f:69:84:de:3f:25:3e:57:12:
         13:72:43:1b:99:f5:e6:7b:47:24:4c:3b:71:50:88:72:95:3d:
         64:4d:26:c2:ab:86:6b:a6:5b:90:8a:d5:26:1e:5a:ac:9e:13:
         c6:ad:89:82:8e:b3:7c:94:45:07:3a:98:4e:c0:a8:03:fb:9d:
         f5:6e:5b:b4:a7:8b:39:b5:9d:7a:aa:95:67:22:55:7d:d2:d1:
         d5:7d:ab:68:61:3c:b0:5f:fd:80:cd:c6:e9:81:5e:76:78:90:
         b8:34:52:23:b4:e6:8c:72:77:bc:40:9b:c0:e1:f5:20:c4:c0:
         6f:26:1f:65:bf:0c:20:cb:df:b9:b0:d0:6e:c1:17:70:1f:67:
         b1:33:44:ac:1d:f1:cf:f3:32:31:bf:c8:11:04:e1:a3:98:61:
         f9:5c:72:1c:62:5a:5b:a4:5e:85:46:e9:cc:9a:79:4f:9d:9b:
         53:17:27:49:c7:ff:3a:ef:af:49:e1:11:2e:f1:81:1a:c5:8d:
         04:4c:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----